Re: normal user for Intel BSPs?


Jim Abernathy
 

On Jan 25, 2012, at 5:42 PM, Scott Garman wrote:

On 01/25/2012 02:18 PM, Darren Hart wrote:
On 01/25/2012 09:36 AM, jfabernathy wrote:
I've noticed that the meta-intel BSP come up with the default
terminal, serial console user, etc. as root. What would it take to
make my own BSP that was exactly the same, but the default was a not
admin user, but you could su or sudo to root?
I'm adding Scott G. who I believe has been working on the useradd
scripts and such (to sanity check the following). I believe you should
be able to setup new users by extending an image recipe with a new task
to make the necessary useradd/mod etc calls on the rootfs prior to
packaging it up.

Scott, can you offer more detail on how that is done?
Hi Jim, Darren:

The useradd mechanism is for supporting custom users and groups in recipes. It sounds like what Jim may find more expedient would be to define a recipe which includes a first-boot script which creates the additional users/groups and then sets up custom ownership on the terminal, serial console user, etc. Otherwise you'd have to do this in several recipes.

Using the first-boot script approach is documented here:

http://www.yoctoproject.org/docs/current/poky-ref-manual/poky-ref-manual.html#usingpoky-extend-addpkg-postinstalls

Whereas using the useradd bitbake class is documented in an example recipe in meta-skeleton/recipes-skeleton/useradd/useradd-example.bb. There is also a slide deck you may find useful here:

http://wiki.yoctoproject.org/wiki/images/e/e6/Custom_Users_Groups_in_Yocto1.1.pdf

I'll also mention that I'm still shaking out bugs in the useradd mechanism. We have some race conditions that are complicating matters when building from sstate. So if you're using one of our stable releases, the first-boot script approach is probably your safest bet.

Scott
Thanks for these suggestions. I'll look them over and figure out what I want to do.

Jim A

--
Scott Garman
Embedded Linux Engineer - Yocto Project
Intel Open Source Technology Center

Join {yocto@lists.yoctoproject.org to automatically receive all group messages.